EUVD-2026-48165

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

EUVD-2026-48163

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...

CVE-2026-57367

CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...

CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

EUVD-2026-48160

Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...

CVE-2026-27403

CVE-2026-27403 concerns the WordPress Hubbub Lite plugin, versions

CVE-2026-27399

CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...

EUVD-2026-48155

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27392

CVE-2026-27392 affects the WordPress uListing plugin

EUVD-2026-48154

Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = 1.0.16 versions...

EUVD-2026-48152

Unauthenticated Broken Access Control in Ditty = 3.1.66 versions...

CVE-2026-27372

The CVE concerns WordPress plugin PeproDev Ultimate Invoice (admin URL not needed) for affected versions

CVE-2026-27355

CVE-2026-27355 affects WordPress Ditty plugin versions

EUVD-2026-48153

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

CVE-2026-27064

CVE-2026-27064 affects the WordPress Mailster plugin, versions

EUVD-2026-48150

Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...

CVE-2026-25427

CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...

EUVD-2026-48149

Subscriber Broken Access Control in eRoom = 1.7.1 versions...

EUVD-2026-48148

Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...

EUVD-2026-48147

Contributor SQL Injection in eRoom = 1.7.1 versions...